Enhancement: network/detection/pgsql-detect.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-03-15 10:33:12 -04:00
parent 6a8d299a6c
commit 5774cb2bbb
1 changed files with 8 additions and 2 deletions

View File

@ -1,14 +1,18 @@
id: pgsql-detect
info:
name: Postgresql Detection
name: PostgreSQL Authentication - Detect
author: nybble04
severity: info
description: |
PostgreSQL, also known as Postgres, is a free and open-source relational database management system emphasizing extensibility and SQL compliance.
PostgreSQL authentication errors were detected.
reference:
- https://www.postgresql.org/docs/current/errcodes-appendix.html
- https://www.postgresql.org/docs/current/client-authentication-problems.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
metadata:
verified: true
shodan-query: port:5432 product:"PostgreSQL"
@ -37,3 +41,5 @@ network:
- "user \"nuclei\"" # The user nuclei (sent in request) doesn't exist
- "database \"nuclei\"" # The db nuclei (sent in request) doesn't exist"
condition: or
# Enhanced by md on 2023/03/15